7.5
CVSSv2

CVE-2006-4237

Published: 21/08/2006 Updated: 19/10/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the _sysSessionPath parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

invisionix systems invisionix roaming system remote

Exploits

/* +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + - - - [DEVIL TEAM THE BEST POLISH TEAM] - - + +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + - IRSR - Invisionix Roaming System Remote <= 02 [_sysSessionPath] Remote File Include Vulnerabilities + +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + - [Script name: IRSR - Invisionix R ...